Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/214850dc-9569-39b7-a46d-10f27745e2df.roa
File:                     214850dc-9569-39b7-a46d-10f27745e2df.roa (raw, json)
Hash identifier:          MutZI4zq5AkBAEmRKvkENoprd7DZt8cRLLi9N6739fY=
Subject key identifier:   BC:A6:63:3D:49:BB:D4:99:03:19:CD:C3:FE:0C:E6:FA:48:78:7A:C0
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F4328584EA787D8DBD32C85DA18F70E58
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/214850dc-9569-39b7-a46d-10f27745e2df.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397453
IP address blocks:        199.103.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d8:db:d3:2c:85:da:18:f7:0e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e5129868-ebc8-4e2b-baf6-b1eaadd151d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:27:c9:c6:88:0b:c9:81:4a:10:8f:de:3d:e2:
                    ad:c8:70:c0:46:da:e0:c1:71:e7:15:c3:21:ca:09:
                    a1:87:70:7e:6e:bf:fd:f1:a9:0e:87:d1:e8:c8:d1:
                    ee:7b:8e:15:a0:e3:89:36:21:cf:c7:24:81:3a:de:
                    ea:82:93:df:57:ca:7d:3c:1a:76:b5:cf:36:66:6f:
                    af:b7:f6:22:b2:e5:e2:bd:60:76:ec:30:40:cd:f7:
                    8a:67:e7:78:3d:bd:3f:8f:7f:c7:f5:09:04:95:00:
                    44:04:99:7e:68:75:b8:38:1f:93:16:ac:30:08:97:
                    87:fd:ae:f6:b9:f8:2a:91:d8:b5:bc:83:9a:6e:57:
                    3d:af:46:78:8e:46:78:f6:03:2d:2a:bc:78:0d:48:
                    63:50:6f:aa:10:81:bf:4a:bd:d3:03:24:ca:d4:5b:
                    b6:d4:85:71:39:c2:17:ec:02:ac:56:81:c6:44:b7:
                    d1:cb:30:8f:cd:12:5e:6a:c1:98:81:30:9a:6d:95:
                    45:12:a2:3f:e1:50:47:81:d1:15:4b:d4:1b:79:dc:
                    ac:fd:20:be:3f:d2:d0:cc:42:c0:d3:70:fd:a3:c0:
                    90:ea:0a:6e:6f:a4:20:4e:8f:a7:80:d6:1e:5b:76:
                    b7:de:d9:f6:7e:b8:0a:d5:cf:a7:bb:95:2a:93:3f:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A6:63:3D:49:BB:D4:99:03:19:CD:C3:FE:0C:E6:FA:48:78:7A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/214850dc-9569-39b7-a46d-10f27745e2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.103.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:76:28:ba:33:ce:b5:41:78:be:37:f7:e1:dd:65:25:dd:12:
         c3:ff:2f:60:53:61:23:2a:c3:80:c5:75:64:8c:21:2f:72:26:
         22:13:18:bc:8b:f2:33:c7:83:43:c7:fd:95:f1:7e:a1:13:e7:
         9e:3f:56:53:c1:9d:a2:3a:2a:a3:52:d3:f8:c8:a0:1a:c4:41:
         19:18:83:0b:ff:47:b5:57:ed:eb:6a:72:cf:1e:25:b2:75:e0:
         20:0e:7c:ab:ca:81:8f:51:c3:3e:ff:27:00:67:af:eb:fd:bd:
         d9:f0:2f:4a:0e:a0:97:b3:60:5c:77:3c:29:ec:6f:f0:80:0f:
         c7:8b:77:0d:e2:70:eb:0b:42:71:3c:6a:86:8a:a6:56:9e:0c:
         58:e9:1b:ca:ea:bc:8f:1f:73:56:26:23:4f:d0:f8:5d:e7:a1:
         d0:b1:32:a1:df:de:d1:4a:5c:3b:2c:cc:03:24:1d:59:01:d1:
         d2:27:c5:f6:35:cb:a7:ed:6d:54:ea:ad:ee:0f:60:07:9c:53:
         e8:ad:85:1e:07:2d:24:73:73:31:80:73:f0:c2:cf:19:a7:ef:
         52:b5:cf:ff:a8:9d:ae:2f:29:54:fe:44:51:c7:7e:81:43:2a:
         83:a2:f1:89:d9:31:7b:97:5c:01:6c:1b:0c:83:c8:6d:59:cb:
         17:c2:fa:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh9jb0yyF2hj3DlgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE5MzliYmMtZTUwZi00Y2VkLTg0ODItZTdjNDAwOGUz
NTgzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTUxMjk4NjgtZWJjOC00ZTJiLWJhZjYtYjFlYWFkZDE1MWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCfJxogLyYFKEI/ePeKtyHDARtrgwXHnFcMh
ygmhh3B+br/98akOh9HoyNHue44VoOOJNiHPxySBOt7qgpPfV8p9PBp2tc82Zm+v
t/YisuXivWB27DBAzfeKZ+d4Pb0/j3/H9QkElQBEBJl+aHW4OB+TFqwwCJeH/a72
ufgqkdi1vIOablc9r0Z4jkZ49gMtKrx4DUhjUG+qEIG/Sr3TAyTK1Fu21IVxOcIX
7AKsVoHGRLfRyzCPzRJeasGYgTCabZVFEqI/4VBHgdEVS9Qbedys/SC+P9LQzELA
03D9o8CQ6gpub6QgTo+ngNYeW3a33tn2frgK1c+nu5Uqkz+wMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLymYz1Ju9SZAxnNw/4M5vpIeHrAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTkz
OWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0MDA4ZTM1ODMvMjE0ODUwZGMtOTU2OS0z
OWI3LWE0NmQtMTBmMjc3NDVlMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE5MzliYmMtZTUwZi00Y2VkLTg0
ODItZTdjNDAwOGUzNTgzLzYxOTM5YmJjLWU1MGYtNGNlZC04NDgyLWU3YzQwMDhl
MzU4My5jcmwwHwYDVR0jBBgwFoAUP434UbbjU/pqwc9K3Q6RzsPeSRYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MTkzOWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0
MDA4ZTM1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2cQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKR2KLozzrVBeL439+HdZSXdEsP/L2BTYSMqw4DFdWSMIS9yJiITGLyL
8jPHg0PH/ZXxfqET554/VlPBnaI6KqNS0/jIoBrEQRkYgwv/R7VX7etqcs8eJbJ1
4CAOfKvKgY9Rwz7/JwBnr+v9vdnwL0oOoJezYFx3PCnsb/CAD8eLdw3icOsLQnE8
aoaKplaeDFjpG8rqvI8fc1YmI0/Q+F3nodCxMqHf3tFKXDsszAMkHVkB0dInxfY1
y6ftbVTqre4PYAecU+ithR4HLSRzczGAc/DCzxmn71K1z/+ona4vKVT+RFHHfoFD
KoOi8YnZMXuXXAFsGwyDyG1ZyxfC+nk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:21 2026 by rpki-client